1. Start the proxy:

sudo ./proxy -selfcert

2. Create the interface (check interface_list for existing ones first):

ligolo-ng » interface_create --name "tunnoe"

3. Transfer the agent binary to the target machine.

4. Start the agent on target:

.\agent.exe -connect 192.168.49.124:11601 -ignore-cert

5. Watch proxy for the agent joining, then select the session:

ligolo-ng » session
? Specify a session : 1 - <hostname> - <ip>:<port> - <uuid>

6. Find the network to route to (ifconfig inside the agent session) to identify the target subnet.

7. Route the interface to that network:

[Agent] » interface_add_route --name tunnoe --route 192.168.56.1/24

8. Start the tunnel:

[Agent] » start --tun tunnoe

9. Verify connectivity to a known host in the routed network:

ping 192.168.56.3

Shortcut: autoroute

Combines steps 6 to 8 interactively:

[Agent] » autoroute
? Select routes to add: 192.168.56.1/24
? Create a new interface or use an existing one? Use an existing one
? Select the interface to use: tunnoe
? Start the tunnel? Yes

Also used in Lateral Movement step 6 for pivoting after credential discovery.